Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/BgcfD1DWkCxjH7uHektyLLqO7JQ.roa
File: BgcfD1DWkCxjH7uHektyLLqO7JQ.roa (raw, json)
Hash identifier: wCGMDLJbtfgGWjqnVTdW8zdEmmnjIWWTrCJ3GYfsQKo=
Subject key identifier: 06:07:1F:0F:50:D6:90:2C:63:1F:BB:87:7A:4B:72:2C:BA:8E:EC:94
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 40BE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/BgcfD1DWkCxjH7uHektyLLqO7JQ.roa
Signing time: Sun 14 Apr 2024 21:52:53 +0000
ROA not before: Sun 14 Apr 2024 21:52:53 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16574 (0x40be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 14 21:52:53 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=06071F0F50D6902C631FBB877A4B722CBA8EEC94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6b:41:3b:f5:2e:04:f8:7d:bc:67:a5:85:79:
ba:9a:f6:11:53:50:7f:20:c4:37:36:52:97:ba:7b:
6e:9f:79:ac:45:2a:22:41:b0:ef:0d:61:d4:82:40:
22:2f:24:b6:31:98:08:4c:e3:be:cf:e0:e2:77:12:
40:d2:60:f3:b6:df:68:0a:8f:a7:f4:4b:4e:14:70:
bd:04:73:93:47:df:05:34:0b:ef:9f:33:fc:b0:c3:
4a:89:75:98:3a:d2:e0:31:38:43:b0:59:8e:2c:8b:
92:52:9d:c2:ff:96:a7:8b:c6:92:ae:b1:d7:b3:83:
4b:0f:b6:7c:1b:33:ee:07:66:d5:11:98:a5:82:8b:
59:47:5b:17:e8:73:b4:ff:0b:43:2f:19:e1:bd:60:
ad:7f:11:12:6b:fe:83:5e:5b:46:55:42:a6:56:c3:
ca:d7:73:75:4c:ab:0b:32:d8:b4:65:60:31:49:70:
dd:8c:d3:a2:33:d5:7e:34:3a:3c:b8:0b:03:ff:f3:
44:56:56:03:e3:64:08:b0:ed:8e:fb:fd:0e:27:40:
c0:a3:4f:9a:1c:a1:21:4b:a9:30:51:32:ec:8c:e6:
c4:6b:ba:79:a0:ac:e9:c5:2a:61:6e:31:87:49:1a:
2f:5e:06:c2:16:15:6c:16:47:88:5e:1c:25:13:fd:
17:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:07:1F:0F:50:D6:90:2C:63:1F:BB:87:7A:4B:72:2C:BA:8E:EC:94
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/BgcfD1DWkCxjH7uHektyLLqO7JQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
89:80:26:3e:5e:24:7b:21:3a:2f:fb:74:91:f4:59:3e:1b:3d:
40:ed:64:bb:7a:93:81:5e:23:ba:55:03:03:66:f8:fa:5c:bd:
47:85:30:ba:44:35:7f:49:91:ae:92:b8:5f:8b:ed:7e:d4:8a:
ba:29:47:a7:a9:a7:86:9f:70:cc:c4:69:4e:ec:95:98:68:3a:
29:2f:49:db:25:a3:12:b5:72:e7:fe:f7:f3:d9:9b:26:08:5f:
52:21:3b:89:dd:90:44:ab:22:5c:e1:03:c7:0e:2c:04:b4:1c:
30:b6:1c:e3:33:c8:cf:d1:1a:f4:e6:74:a9:9d:47:5e:42:a1:
b3:61:4d:be:e1:17:8b:47:6d:1b:cc:57:e8:b9:c2:ea:f8:b0:
61:7b:8d:d3:36:c6:9b:6d:e5:8e:20:94:00:18:17:fc:53:61:
6a:50:c9:e2:26:90:a7:da:61:32:c6:a0:8f:6c:14:8f:80:91:
07:36:71:d4:5e:28:1a:0c:1d:83:ac:9c:7b:e3:3d:2a:60:94:
83:73:ad:32:56:1a:d2:3f:07:59:49:30:88:05:f3:62:39:9c:
0f:d8:9c:f1:5d:7a:70:dd:f6:85:58:31:33:70:ba:08:e5:14:
bf:b2:c9:b2:cd:c6:43:21:a0:20:89:9f:37:da:18:8b:58:52:
fa:87:92:29
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICQL4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTQy
MTUyNTNaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDA2MDcxRjBGNTBENjkw
MkM2MzFGQkI4NzdBNEI3MjJDQkE4RUVDOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIa0E79S4E+H28Z6WFebqa9hFTUH8gxDc2Upe6e26feaxFKiJB
sO8NYdSCQCIvJLYxmAhM477P4OJ3EkDSYPO232gKj6f0S04UcL0Ec5NH3wU0C++f
M/yww0qJdZg60uAxOEOwWY4si5JSncL/lqeLxpKusdezg0sPtnwbM+4HZtURmKWC
i1lHWxfoc7T/C0MvGeG9YK1/ERJr/oNeW0ZVQqZWw8rXc3VMqwsy2LRlYDFJcN2M
06Iz1X40Ojy4CwP/80RWVgPjZAiw7Y77/Q4nQMCjT5ocoSFLqTBRMuyM5sRrunmg
rOnFKmFuMYdJGi9eBsIWFWwWR4heHCUT/RfvAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUBgcfD1DWkCxjH7uHektyLLqO7JQwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0JnY2ZEMURXa0N4akg3
dUhla3R5TExxTzdKUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAiYAmPl4keyE6L/t0kfRZPhs9QO1ku3qT
gV4julUDA2b4+ly9R4UwukQ1f0mRrpK4X4vtftSKuilHp6mnhp9wzMRpTuyVmGg6
KS9J2yWjErVy5/7389mbJghfUiE7id2QRKsiXOEDxw4sBLQcMLYc4zPIz9Ea9OZ0
qZ1HXkKhs2FNvuEXi0dtG8xX6LnC6viwYXuN0zbGm23ljiCUABgX/FNhalDJ4iaQ
p9phMsagj2wUj4CRBzZx1F4oGgwdg6yce+M9KmCUg3OtMlYa0j8HWUkwiAXzYjmc
D9ic8V16cN32hVgxM3C6COUUv7LJss3GQyGgIImfN9oYi1hS+oeSKQ==
-----END CERTIFICATE-----
Generated at Sat Jun 21 18:39:36 2025 by rpki-client